01 · Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Nicolas Dunke
Neuburgerstraße 25c
76287 Rheinstetten, Germany
Email: [email protected]
02 · What we process
MapsMover helps you move your own Google Maps saved places from one Google account to another. To provide the service we process:
- Account data — your email address and account identifier, provided when you sign in with Google.
- Transfer data — the list names and places contained in the Google Takeout export you upload, stored so the transfer can run and resume.
- Billing data — your purchase history and credit balance (payment card details are handled solely by our payment processor, never by us).
- Technical access data — server logs such as IP address, browser type, and request time, generated automatically by our hosting and CDN providers.
The legal basis for this processing is Art. 6 (1)(b) GDPR (performance of a contract) for the transfer service and account, and Art. 6 (1)(f) GDPR (legitimate interest in a secure, functioning service) for technical logs.
03 · SSL/TLS encryption
For security, this site uses SSL/TLS encryption for all data transmitted between your browser and our servers. You can recognize an encrypted connection by the https://prefix and the lock icon in your browser's address bar. While encryption is active, the data you submit cannot be read by third parties.
04 · Hosting & CDN
Vercel
Our application is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit MapsMover, Vercel automatically processes technical access data (such as IP address, requested URL, and timestamp) to deliver the site and protect it against abuse. Data transfers to the USA are covered by the EU Standard Contractual Clauses. More information: vercel.com/legal/privacy-policy.
Cloudflare
We use the content delivery network and security services of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare routes traffic to our servers, caches static content, and mitigates attacks. For this purpose it processes technical access data and may set strictly necessary cookies (e.g. __cf_bm) to distinguish humans from bots. Data transfers to the USA are covered by the EU Standard Contractual Clauses. More information: cloudflare.com/privacypolicy.
05 · Database & authentication
Supabase
Your account, credit balance, and transfer data are stored in a Postgres database and authenticated through Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992. Supabase acts as our processor under a data processing agreement. Sign-in is handled via Google OAuth; we receive only your email address and a stable account identifier from Google — we never receive or store your Google password. More information: supabase.com/privacy.
06 · Your uploaded places
To run a transfer, you upload a Google Takeout export of your own saved places. We parse it and store the list names, place titles, and Google Maps links so the transfer can be performed and resumed if interrupted. This data is processed strictly to carry out the transfer you requested (Art. 6 (1)(b) GDPR) and is associated with your account. You can request deletion of your transfer data at any time (see Your rights).
07 · Payments
Stripe
Payments for place credits and passes are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. When you make a purchase, the payment and card data you enter are transmitted directly to Stripe; we never see or store your full card details. We receive only a payment confirmation and a customer reference to allocate your credits. The legal basis is Art. 6 (1)(b) GDPR. More information: stripe.com/privacy.
09 · Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- rectify inaccurate data (Art. 16);
- erase your data (Art. 17);
- restrict processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interest (Art. 21).
To exercise any of these rights, contact us at [email protected]. You may also delete your account at any time, which removes your stored transfer data.
10 · Right to lodge a complaint
If you believe the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence, place of work, or the place of the alleged infringement.
11 · Changes to this policy
We may update this privacy policy to reflect changes to our service or legal requirements. The current version always applies and is dated at the top of this page.